{
    "properties": {
        "ADAllowMultiDomainAuth": {
            "default": true,
            "description": "Allow authentication from any domain in the forest",
            "type": "boolean"
        },
        "ADAllowMultiDomainAuthFlag": {
            "default": true,
            "description": "Enable ADAllowMultiDomainAuth Key",
            "type": "boolean"
        },
        "ADCreateMobileAccountAtLogin": {
            "default": false,
            "description": "Create mobile account at login.",
            "type": "boolean"
        },
        "ADCreateMobileAccountAtLoginFlag": {
            "default": true,
            "description": "Enable ADCreateMobileAccountAtLogin Flag",
            "type": "boolean"
        },
        "ADDefaultUserShell": {
            "default": "/bin/bash",
            "description": "Default user shell",
            "type": "string"
        },
        "ADDefaultUserShellFlag": {
            "default": true,
            "description": "Enable ADDefaultUserShell Key",
            "type": "boolean"
        },
        "ADDomainAdminGroupList": {
            "description": "Allow administration by specified Active Directory groups.",
            "items": {
                "description": "An active directory group",
                "type": "string"
            },
            "type": "array"
        },
        "ADDomainAdminGroupListFlag": {
            "default": false,
            "description": "Enable ADDomainAdminGroupList Key",
            "type": "boolean"
        },
        "ADForceHomeLocal": {
            "default": true,
            "description": "Force local home directory on startup disk",
            "type": "boolean"
        },
        "ADForceHomeLocalFlag": {
            "default": true,
            "description": "Enable ADForceHomeLocal Flag",
            "type": "boolean"
        },
        "ADMapGGIDAttribute": {
            "description": "Map group GID to attribute",
            "type": "string"
        },
        "ADMapGGIDAttributeFlag": {
            "default": false,
            "description": "Enable ADMapGGIDAttribute Key",
            "type": "boolean"
        },
        "ADMapGIDAttribute": {
            "description": "Map user GID to attribute",
            "type": "string"
        },
        "ADMapGIDAttributeFlag": {
            "default": false,
            "description": "Enable ADMapGIDAttribute Key",
            "type": "boolean"
        },
        "ADMapUIDAttribute": {
            "description": "Map UID to attribute",
            "type": "string"
        },
        "ADMapUIDAttributeFlag": {
            "default": false,
            "description": "Enable ADMapUIDAttribute Key",
            "type": "boolean"
        },
        "ADMountStyle": {
            "default": "smb",
            "description": "Network protocol to be used to mount home directory.",
            "enum": [
                "afp",
                "smb"
            ],
            "type": "string"
        },
        "ADNamespace": {
            "default": "domain",
            "description": "Set primary user account naming convention: \"forest\" or \"domain\"",
            "enum": [
                "domain",
                "forest"
            ],
            "type": "string"
        },
        "ADNamespaceFlag": {
            "default": true,
            "description": "Enable ADNamespace Key",
            "type": "boolean"
        },
        "ADOrganizationalUnit": {
            "description": "The organizational unit (OU) where the joining computer object is added.",
            "type": "string"
        },
        "ADPacketEncrypt": {
            "default": "allow",
            "description": "Packet encryption",
            "enum": [
                "allow",
                "disable",
                "require",
                "ssl"
            ],
            "type": "string"
        },
        "ADPacketEncryptFlag": {
            "default": true,
            "description": "Enable ADPacketEncrypt Key",
            "type": "boolean"
        },
        "ADPacketSign": {
            "default": "allow",
            "description": "Packet signing",
            "enum": [
                "allow",
                "disable",
                "require"
            ],
            "type": "string"
        },
        "ADPacketSignFlag": {
            "default": true,
            "description": "Enable ADPacketSign Key",
            "type": "boolean"
        },
        "ADPreferredDCServer": {
            "description": "Preferred domain server",
            "type": "string"
        },
        "ADPreferredDCServerFlag": {
            "default": false,
            "description": "Enable ADPreferredDCServer Key",
            "type": "boolean"
        },
        "ADRestrictDDNS": {
            "description": "Restrict Dynamic DNS updates to the specified interfaces (e.g. en0, en1, etc).",
            "items": {
                "description": "An interface name which is allowed to make DDNS updates",
                "type": "string"
            },
            "type": "array"
        },
        "ADRestrictDDNSFlag": {
            "default": false,
            "description": "Enable ADRestrictDDNS Key",
            "type": "boolean"
        },
        "ADTrustChangePassIntervalDays": {
            "default": 14,
            "description": "How often to change computer trust account password in days",
            "type": "number"
        },
        "ADTrustChangePassIntervalDaysFlag": {
            "default": true,
            "description": "Enable ADTrustChangePassIntervalDays Key",
            "type": "boolean"
        },
        "ADUseWindowsUNCPath": {
            "default": true,
            "description": "Use UNC path from Active Directory to derive network home location",
            "type": "boolean"
        },
        "ADUseWindowsUNCPathFlag": {
            "default": true,
            "description": "Enable ADUseWindowsUNCPath Flag",
            "type": "boolean"
        },
        "ADWarnUserBeforeCreatingMA": {
            "default": false,
            "description": "Require confirmation before creating mobile account",
            "type": "boolean"
        },
        "ADWarnUserBeforeCreatingMAFlag": {
            "default": true,
            "description": "Enable ADWarnUserBeforeCreatingMA Flag",
            "type": "boolean"
        },
        "ClientID": {
            "description": "The directory server client ID.",
            "type": "string"
        },
        "HostName": {
            "description": "The Active Directory domain to join.",
            "type": "string"
        },
        "Password": {
            "description": "Password of the account used to join the domain.",
            "type": "string"
        },
        "PayloadDescription": {
            "default": "Active Directory Payload",
            "description": "Description of the payload",
            "type": "string"
        },
        "PayloadDisplayName": {
            "default": "Active Directory Payload",
            "description": "Name of the payload",
            "type": "string"
        },
        "PayloadIdentifier": {
            "default": "com.apple.DirectoryService.managed",
            "description": "A unique identifier for the payload, dot-delimited.  Usually root PayloadIdentifier+subidentifier",
            "type": "string"
        },
        "PayloadOrganization": {
            "description": "This value describes the issuing organization of the profile, as displayed to the user",
            "type": "string"
        },
        "PayloadType": {
            "default": "com.apple.DirectoryService.managed",
            "description": "The type of the payload, a reverse dns string",
            "type": "string"
        },
        "PayloadUUID": {
            "default": "",
            "description": "Unique identifier for the payload (format 01234567-89AB-CDEF-0123-456789ABCDEF)",
            "pattern": "^[0-9A-Za-z]{8}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{12}$",
            "type": "string"
        },
        "PayloadVersion": {
            "default": 1,
            "description": "The version of the whole configuration profile.",
            "type": "number"
        },
        "UserName": {
            "description": "User name of the account used to join the domain.",
            "type": "string"
        }
    },
    "title": "com.apple.DirectoryService.managed",
    "type": "object"
}